Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados

35.469CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.301 exploits

Referência

CVE-2022-41413

CVE-2022-41413MEDIUM

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack

33RIESGO

abrir ↗

Referência

CVE-2022-42889

CVE-2022-42889—

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17637

CVE-2017-17637—

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17637

CVE-2017-17637—

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.

23RIESGO

abrir ↗

Referência

CVE-2022-4297

CVE-2022-4297CRITICAL

WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência

CVE-2022-4297

CVE-2022-4297CRITICAL

WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência

CVE-2022-44149

CVE-2022-44149HIGH

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RIESGO

abrir ↗

Referência

CVE-2022-44149

CVE-2022-44149HIGH

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RIESGO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

100RIESGO

abrir ↗

Referência

CVE-2017-5817

CVE-2017-5817—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RIESGO

abrir ↗

Referência

CVE-2022-48197

CVE-2022-48197—

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

38RIESGO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RIESGO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RIESGO

abrir ↗

Referência

CVE-2023-0493

CVE-2023-0493MEDIUM

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

33RIESGO

abrir ↗

Referência

CVE-2023-0527

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RIESGO

abrir ↗

Referência

CVE-2023-0669

CVE-2023-0669HIGHbajo ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

Referência

CVE-2023-0669

CVE-2023-0669HIGHbajo ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

Referência

CVE-2023-0777

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RIESGO

abrir ↗

Referência

EasyNas 1.1.0 - OS Command Injection

CVE-2023-0830MEDIUMremotehardware

EasyNAS backup.pl system os command injection

38RIESGO

abrir ↗

Referência

CVE-2023-0902

CVE-2023-0902LOW

SourceCodester Simple Food Ordering System process_order.php cross site scripting

28RIESGO

abrir ↗

Referência

CVE-2023-0904

CVE-2023-0904MEDIUM

SourceCodester Employee Task Management System task-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2023-0912

CVE-2023-0912MEDIUM

SourceCodester Auto Dealer Management System sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-8594

CVE-2017-8594—

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute

35RIESGO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RIESGO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RIESGO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RIESGO

abrir ↗

Referência

CVE-2023-29848

CVE-2023-29848MEDIUM

Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in

33RIESGO

abrir ↗

Referência

CVE-2023-29849

CVE-2023-29849HIGH

Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.